Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Sign up for free
Menu
Search
Features
All features
Private URLs
Password Protection
Custom URLS
Scheduled publishing
Remove Branding
Restrict embedding
Deck Collections
Notes
Features
All features
Private URLs
Password Protection
Custom URLS
Scheduled publishing
Remove Branding
Restrict embedding
Deck Collections
Notes
Explore
Featured decks
Featured speakers
Programming
Technology
Storyboards
Explore
Featured decks
Featured speakers
Programming
Technology
Storyboards
Pricing
Search
Sign in
Sign up for free
あの日学んだ攻撃の方法を僕達はまだ知らない。
Search
Mr.Rabbit
December 07, 2017
210
0
Share
Embed
Copy iframe code
Copy JS code
Copy link
Start on current slide
あの日学んだ攻撃の方法を僕達はまだ知らない。
2017年8月2日(水) 濱せっく 出張版#3で発表させてもらった資料です。
Mr.Rabbit
December 07, 2017
More Decks by Mr.Rabbit
See All by Mr.Rabbit
Azazel Series
01rabbit
0
110
Azazel System for Emergency Shelters
01rabbit
0
210
BOCCHI
01rabbit
0
61
KaliPAKU
01rabbit
0
39
Babbly
01rabbit
0
110
P.A.K.U.R.I SECCON2019 Akihabara YOROZU
01rabbit
1
130
P.A.K.U.R.I AVTOKYO HIVE
01rabbit
0
120
The Empire Strikes Back ~MR.RABBIT 帝国の逆襲~
01rabbit
0
270
地雷探しに脆弱性を使うのは間違っているだろうか Hack a Minesweeper
01rabbit
0
230
Featured
See All Featured
Why Our Code Smells
bkeepers
PRO
340
58k
Leadership Guide Workshop - DevTernity 2021
reverentgeek
1
410
Information Architects: The Missing Link in Design Systems
soysaucechin
1
1.2k
VelocityConf: Rendering Performance Case Studies
addyosmani
331
25k
Fantastic passwords and where to find them - at NoRuKo
philnash
53
4k
Put a Button on it: Removing Barriers to Going Fast.
kastner
60
4.6k
Optimising Largest Contentful Paint
csswizardry
37
4k
Leo the Paperboy
mayatellez
10
2.4k
Collaborative Software Design: How to facilitate domain modelling decisions
baasie
1
360
Redefining SEO in the New Era of Traffic Generation
szymonslowik
1
500
Producing Creativity
orderedlist
PRO
348
41k
How to Grow Your eCommerce with AI & Automation
katarinadahlin
PRO
2
340
Transcript
ᖛͤͬ͘ग़ு൛ !SBJU
͋͐͡Μͩ w ແઢ-"/ͷڴҖ w )PXUP+BNNJOH w ߈ܸɾޚγφϦΦ w ·ͱΊ
ࣗݾհ ͏͗͞ w झຯͰηΩϡϦςΟใͷऩूɺ߈ܸݕূ Λͯ͠ΔࣗশϖςϯࢣڃΫϥοΧʔ w ॏ͍தೋපΛױ͍ͬͯΔϥϊϕѪಡՈ w झຯےτϨͱαόήʔ ͏͞ϒϩ
ɹIUUQSBJUCMPHIBUFCMPKQ 5XJUUFS ɹ!SBJU
–ͱ͋Δຐज़ͷېॻ lຐज़ͱɺ࠽ೳͷແ͍ਓ͕ؒͦΕͰ࠽ೳ͋Δ ਓؒͱରʹͳΔҝͷٕज़z
ແઢ-"/ͷ͓
ແઢ-"/ͷڴҖ w ػີੑͷ߈ܸ ʢෆਖ਼ΞΫηεϙΠϯτɺೝূ߈ܸʣ w Մ༻ੑͷ߈ܸ ʢαʔϏεڋ൱߈ܸʣ
ػີੑͷ߈ܸ
ແઢ-"/ͷڴҖ ػີੑͷ߈ܸɿෆਖ਼ΞΫηεϙΠϯτ
ແઢ-"/ͷڴҖ ػີੑͷ߈ܸɿ҉߸伴ͷΫϥοΩϯά
ແઢ-"/ͷڴҖ ػີੑͷ߈ܸํ๏
Մ༻ੑͷ߈ܸ
ແઢ-"/ͷڴҖ Մ༻ੑͷ߈ܸɿαʔϏεڋ൱߈ܸ
ແઢ-"/ͷڴҖ Մ༻ੑͷ߈ܸํ๏ ͱ͜ΖͰɾɾɾ ແઢ-"/ͷδϟϛϯάͬͯͲ͏Δͷʁ
ແઢ-"/ͷ௨৴ ύογϒPSΞΫςΟϒεΩϟϯ ೝূ σʔλϑϨʔϜͷૹड৴ ͬ͘͟Γͱͨ͠
ແઢ-"/ͷڴҖ δϟϛϯάͷํ๏ %F"VUIFOUJDBUJPO ʢೝূऔΓফ͠ʣ ೝূࡁ
)PXUP+BNNJOH
)PXUP+BNNJOH BJSNPOOHϞχλʔϞʔυʹมߋ BJSPEVNQOH௨৴ड BJSFQMBZOHδϟϛϯά
)PXUP+BNNJOH ϞχλʔϞʔυʹมߋ JXDPOpHͰΠϯλʔϑΣʔεΛ֬ೝ
)PXUP+BNNJOH ϞχλʔϞʔυʹมߋ BJSNPOOHTUBSUʲΠϯλʔϑΣʔεʳ ΠϯλʔϑΣʔεΛϞχλʔϞʔυมߋ͢Δ BJSNPOOHͰΠϯλʔϑΣʔεΛϞχλʔϞʔυʹมߋ
)PXUP+BNNJOH ϞχλʔϞʔυʹมߋ ϞχλʔϞʔυʹมߋ͞Εͨ͜ͱΛ֬ೝ
)PXUP+BNNJOH ௨৴ड BJSPEVNQOHͰ௨৴डʢBJSPEVNQOHXMBONPOʣ
)PXUP+BNNJOH δϟϛϯά BJSFQMBZOHͰδϟϛϯάΛ͔͚Δ w BJSFQMBZOHBʲ#44*%ʳʲΠϯλʔϑΣʔεʳ w ɹEF"VUIFOUJDBUJPO༻Φϓγϣϯ w ɹEF"VUIFOUJDBUJPOύέοτͷૹ৴ճʢ̌࿈ଓʣ w
Bʲ#44*%ʳඪతͱͳΔωοτϫʔΫͷ#44*%
)PXUP+BNNJOH δϟϛϯά ඪత͕νϟϯωϧͳͷͰɺJXDPOpHίϚϯυͰʹมߋ νϟϯωϧΛἧ͑ͨΒBJSFQMBZOHͰδϟϛϯά։࢝
δϟϛϯάΛ༻ͨ͠ ߈ܸɾޚγφϦΦ
߈ܸγφϦΦ
߈ܸγφϦΦɹͦͷ̍ αʔϏεڋ൱߈ܸ 44*%GSFF@DBGF
߈ܸγφϦΦɹͦͷ̍ ࣮ࡍʹඃʹ͋ͬͯΈΑ͏ʂ 44*%GSFF@DBGF
߈ܸγφϦΦɹͦͷ̎ ൜Χϝϥఀࢭ
߈ܸγφϦΦɹͦͷ̎ ແઢ-"/Χϝϥ w ൺֱత҆ՁͰઃஔՄೳ w ϧʔλʔʹଓ͢Δ͚ͩͰར༻Ͱ͖Δ w ϧʔλʔͱͷؒ҉߸Խ͞Ε͍Δ ʢΧϝϥө૾Λ͖ݟΔͷ͍͠ʣ ͔͠͠ɺΧϝϥͷΛ௵͢͜ͱෆՄೳͰͳ͍
߈ܸγφϦΦɹͦͷ̎ ൜Χϝϥఀࢭ
ޚγφϦΦ
ฌݿݝܯͷʮूதՍి࡞ઓʯ ɹ.4/࢈ܦXFTUͷ݄ͷهࣄ ʹΑΔͱɺฌݿݝܯʮूதՍి࡞ ઓʯͱ͍͏ɺৼΓࠐΊٗάϧʔϓ ʹରͯ͠ͻͨ͢ΒిΛ͔͚ଓ͚ͯ ճઢΛڌͯ͠༻ෆೳʹ͢Δ͍Θ ΏΔʮαʔϏεڋ൱߈ܸʯΛͬͯ ৼΓࠐΊٗΛ͗ٗඃΛݮΒ ͨ͠ͱใ͡ΒΕ͍ͯͨɻ ͜Εɺ͑ΔΜ͡ΌͶʁ
ޚγφϦΦɹͦͷ̍ ෆਖ਼ΞΫηεϙΠϯτରࡦ 44*%GSFF@DBGF 44*%GSFF@DBGF@
ޚγφϦΦɹͦͷ̎ ౪ࡱυϩʔϯରࡦ
ޚγφϦΦɹͦͷ̎ ౪ࡱυϩʔϯରࡦɿ࣮ԋ
·ͱΊ w 8J'Jͷ߈ܸʹ8&1ɺ81"81"ͷΫϥοΩϯάͩ ͚Ͱͳ͍ w %P4߈ܸ͕ܧଓతʹߦΘΕΔͱɺՄ༻ੑ͕ࣦΘΕΔ͚ͩ Ͱͳ͘৴༻ࣦ͏͜ͱʹͭͳ͕Δ w ਖ਼͍͠ํ๏ͱݴ͍Εͳ͍͕ɺ߈ܸऀͱಉ͡ख๏Λ ޚʹస༻͢Δ͜ͱͰ͖Δ
͓ΘΓ